TW201937391A - Information processing method, information processing device, program, and information processing terminal - Google Patents

Abstract

An information processing device executes: a process for managing a second account and a first account in a service provided by the information processing device; a process for registering, upon reception of a request from an information processing terminal of a user of the first account, a user of the second account as a user capable of recovering the first account; and a process for permitting, in the case where authentication based on authentication information of the user of the first account input to an information processing terminal of the user of the second account is succeeded, login by the user of the first account.

Description

Information processing method, information processing device, program, and information processing terminal

The present disclosure relates to an information processing method, an information processing device, a program, and an information processing terminal.

In the past, a server that provides various services to user terminals via a network is known to authenticate users by using a user ID and a password when the user logs in to the service provided by the server.

In addition, in order to improve security, in addition to authentication such as user ID and password, SMS is sent by the server (Short Message Service), or an authentication number (security code) is sent by e-mail or the like. A technique of phase authentication (two-factor authentication) is known (for example, refer to Patent Document 1).

[Previous Technical Literature]
[Patent Literature]
[Patent Document 1] Japanese Patent Publication No. 2012-506594

[Summary of the Invention]
[Problems to be solved by the invention]

However, in the conventional technology, there are the following problems, for example, it is not possible to perform two-stage authentication using a change in a telephone number or an email address, and there is a case where it is impossible to log in using the user's account.

The present disclosure has been made in view of the above problems, and aims to provide a technique capable of preventing a situation in which it is impossible to log in using a user's account.
[Means to solve the problem]

The information processing method related to one embodiment of the present disclosure performs the following processing, the information processing apparatus each managing the processing of the first account and the second account among the services provided by the information processing apparatus; receiving the first account from the foregoing When the user's information processing terminal requests, the user of the second account is registered as a process of recovering the user of the first account; when the first account of the information processing terminal based on the user input to the second account is used In the case where the authentication information of the user is successful and the authentication is successful, the processing of the login of the user of the aforementioned first account is permitted.

[Formation for implementing the invention]

<Compliance with regulatory matters>
It should be noted that the disclosures set forth in this specification are premised on the regulatory matters of the country of implementation necessary to comply with the implementation of the present disclosure, such as the secrets of communications.

Embodiments for implementing the information processing method, the information processing device, and the program related to the present disclosure will be described with reference to the drawings.

<System Composition>
Fig. 1 shows the configuration of a communication system 1 in an embodiment of the present disclosure. As shown in FIG. 1, in the communication system 1, the server 10 is connected to the terminal 20 (the terminal 20A, the terminal 20B, and the terminal 20C) via the network 30. The server 10 provides a service for transmitting and receiving messages between the terminal 20 and the terminal 20 owned by the user via the network 30. Also, the number of terminals 20 connected to the network 30 is not limited.

Network 30 is responsible for the task of connecting more than one terminal 20 to more than one server 10. That is, the network 30 is a communication network that provides a connection path for transmitting and receiving data after the terminal 20 is connected to the server 10.

One or more of the networks 30 can be a wired or wireless network. The network 30 is not limited. For example, it may include an ad hoc network, an intranet, an extranet, a virtual private network (VPN), and an area. Local area network (LAN), wireless local area network (WLAN), wide area network (WAN), wireless WAN (WWAN), metropolitan area network (MAN) ), part of the Internet, part of the Public Switched Telephone Network (PSTN), mobile phone network, ISDN (integrated service digital networks), wireless LAN, LTE (long-range) Long term evolution), CDMA (code division multiple access), Bluetooth (registered trademark), satellite communication, etc., or a combination of two or more of these. The network 30 can include one or more of the networks 30.

The terminal 20 (the terminal 20A, the terminal 20B, and the terminal 20C) may be any terminal, and may be an information processing terminal that can realize the functions described in the respective embodiments. The terminal 20 is not limited, and includes, as an example, a smart phone, a mobile phone (feature phone), and a computer (not limited thereto, as an example, a desktop type, a laptop type, a tablet type, etc.) , media computer platform (not limited, as an example, there are cables, satellite set-top boxes, digital video recorders), handheld computer devices (handheld Computer device) (not limited thereto, as an example, there are PDA, (personal digital assistant), e-mail user agent, etc.), wearable terminal (glasses type device, watch) Type of device, etc.), or other type of computer, or communication platform. Also, the terminal 20 can be embodied as an information processing terminal.

Since the configurations of the terminal 20A, the terminal 20B, and the terminal 20C are basically the same, the terminal 20 will be described below. Further, if necessary, the terminal used by the user X is represented as the terminal 20X, and the user information in the designated service associated with the user X or the terminal 20X is represented as the user information X. Further, the user information refers to the information of the user related to the account utilized by the user in the specified service. The user information is not limited, and as an example, includes the user name input by the user or by the specified service, the user's image (Icon image), the user's age, the user's gender, the user's residence, and the user's interest. The information related to the user, such as the interest, the user's identification code, etc., may be any of these or a combination thereof.

The server 10 is provided with a function of providing a designated service to the terminal 20. The server 10 may be any device as long as it is an information processing device that can realize the functions described in the respective embodiments. The server 10 is not limited, and includes, as an example thereof, a server device and a computer (not limited thereto, for example, a desktop type, a laptop type, a tablet type, etc.) and a media computer platform (not limited thereto). For example, there are cables, satellite transponders, digital video recorders, handheld computer devices (not limited, as an example, there are PDAs, email user agents, etc.), or other kinds of computers, or communication platforms. . Also, the server 10 can be embodied as an information processing device. In the case where it is not necessary to distinguish between the server 10 and the terminal 20, the server 10 and the terminal 20 can each behave as an information processing device.

<hardware (HW) composition>
The HW configuration of each device included in the communication system 1 will be described with reference to Fig. 1 .

(1) HW composition of the terminal

The terminal 20 includes a control device 21 (CPU: central processing unit), a storage device 28, a communication I/F 22 (interface), an input and output device 23, a display device 24, a microphone 25, and a speaker. 26. Camera 27. The constituent elements of the HW of the terminal 20 are not limited, and as an example, they are connected to each other by a bus B.

The communication I/F 22 transmits and receives various materials through the network 30. The communication system can be executed by either wired or wireless, and any communication protocol can be used as long as the communication with each other can be performed. The communication I/F 22 has a function of performing communication with the server 10 via the network 30. The communication I/F 22 transmits various materials to the server 10 in accordance with an instruction from the control device 21. Further, the communication I/F 22 receives various materials transmitted from the server 10 and transmits them to the control device 21.

The input and output device 23 includes means for inputting various operations to the terminal 20, and means for outputting the processing result processed by the terminal 20. The input and output devices 23 may be integrated with the input device and the output device, or the input device may be separated from the output device.

The input device is implemented by any one or a combination of devices that can receive information related to the input to the control device 21 by receiving input from the user. The input device is not limited, and as an example thereof, includes a hardware button such as a touch panel, a touch display, a keyboard, a pointing device such as a mouse, a camera (operation input by motion image), and a microphone ( Use the operation input of the sound).

The output device is realized by any one or a combination of all kinds of devices that can output the processing results processed by the control device 21. The output device is not limited, and examples thereof include a touch panel, a touch display, a speaker (sound output), and a lens (not limited thereto, and as an example, there are 3D output and hologram output). , printers, etc.

The display device 24 is realized by any one or a combination of all types of devices that can be displayed in accordance with display data written in a frame buffer. The display device 24 is not limited, and includes, as an example, a touch panel, a touch display, and a monitor (not limited thereto, and examples thereof include a liquid crystal display, an OELD (organic electroluminescence display), and a head. A device that displays a video or text information, such as a Head Mounted Display (HDM), a projection mapping, a hologram, or an air (also a vacuum). The display device 24 can also display data in 3D.

In the case where the input and output device 23 is a touch panel, the input and output devices 23 and the display device 24 can be configured to face each other in substantially the same size and shape.

The control device 21 has a circuit for physically configuring the function realized by a code or a command contained in the program, and is not limited thereto, and as an example thereof, it is realized by a hard data storage device.

The control device 21 is not limited, and includes, as an example, a central processing unit (CPU), a microprocessor, a processor core, a multiprocessor, and an ASIC (application-specific integrated circuit (application) -specific integrated circuit)), FPGA (field programmable gate array).

The storage device 28 has functions of various programs and various materials necessary for the operation of the storage terminal 20. The storage device 28 is not limited, and includes, for example, an HDD (hard disk drive), an SSD (solid state drive), a flash memory, and a RAM (random memory). Various memory media such as memory (random access memory) and ROM (read only memory) are used.

The terminal 20 stores the program P in the storage device 28, and by executing the program P, the control device 21 executes the processing of each part included in the control device 21. That is, the program P stored in the storage device 28 causes the terminal 20 to implement each function performed by the control device 21.

The microphone 25 is used for input of sound data. The speaker 26 is used for the output of the sound material. The camera 27 is used for acquisition of moving image data.

(2) HW Configuration of Server The server 10 includes a control device 11 (CPU), a storage device 15, a communication I/F 14 (interface), an input and output device 12, and a display 13. The constituent elements of the HW of the server 10 are not limited, and as an example, they are connected to each other by the bus bar B.

The control device 11 has a circuit for physically configuring the function realized by a code or a command contained in the program, and is not limited thereto, and is exemplified by a data processing device built in a hard body.

The control device 11 is typically a central processing unit (CPU), and the other may be a microprocessor, a core processor, a multiprocessor, an ASIC, or an FPGA. However, in the present disclosure, the control device 11 is not limited to this.

The storage device 15 has functions for storing various programs and various materials necessary for the operation of the server 10. The storage device 15 is realized by various types of memory media such as HDD, SSD, and flash memory. However, in the present disclosure, the storage device 15 is not limited thereto.

The communication I/F 14 performs transmission and reception of various materials through the network 30. The communication can be performed by either wired or wireless, and any communication protocol can be used as long as communication with each other can be performed. The communication I/F 14 has a function of performing communication with the terminal 20 via the network 30. The communication I/F 14 transmits various materials to the terminal 20 in accordance with an instruction from the control device 11. Further, the communication I/F 14 receives various materials transmitted from the terminal 20 and transmits them to the control device 11.

The input and output device 12 is realized by means of inputting various operations to the server 10. The input and output device 12 is realized by receiving an input from a user, and transmitting information related to the input to any one of the types of devices of the control device 11 or a combination thereof. The input and output device 12 can be realized by a pointing device such as a hard key or a mouse represented by a representative keyboard or the like. Further, the input and output device 12 is not limited, and may include, for example, a touch panel, a camera (operation input by moving image), and a microphone (operation input using sound). However, in the present disclosure, the input and output device 12 is not limited to this.

The display 13 is typically a monitor (not limited thereto, and is exemplified by a liquid crystal display or an OELD (Organic Electroluminescent Display)). Further, the display 13 may be a head mounted display (HDM) or the like. Moreover, the display 13 of these displays can also display data in 3D. However, in the present disclosure, the display 13 is not limited to this.

The server 10 stores the program P in the storage device 15, and by executing the program P, the control device 11 executes the processing of each part included in the control device 11. That is, the program P stored in the storage device 15 is connected to the server 10 to implement the functions performed by the control device 11.

In the embodiments of the present disclosure, the program is executed by the CPU of the terminal 20 and/or the server 10 to implement the program P.

Further, the control device 21 of the terminal 20 and/or the control device 11 of the server 10 may be integrated with not only a CPU but also an integrated circuit (IC (Integrated Circuit) chip, LSI (Large Scale Integration). The processing is realized by a logic circuit (hardware) or a dedicated circuit formed by the like. Further, these circuits can be realized by one or a plurality of integrated circuits, and a plurality of processes shown in the respective embodiments can be realized by one integrated circuit. Further, LSI may be referred to as VLSI, Super LSI, or Ultra LSI depending on the degree of integration.

Further, the program P (software/computer program) of each embodiment of the present disclosure can be stored in a state of a computer-readable memory medium. Memory media can store programs in "non-transitory tangible media".

The memory medium may include one or more suitable semiconductor-based memory media or other integrated circuits (ICs) as appropriate (not limited thereto, as an example, a field programmable gate array) (FPGA)) or application specific IC (ASIC), hard disk drive (HDD), hybrid hard drive (HHD), CD, CD drive (optical disk drive (ODD)), magneto optical disk, magneto-optical drive, floppy diskette, floppy disk drive (FDD), tape (magnetic tape), solid state drive (SSD), RAM drive, secure digital card or drive, any other suitable memory medium, or a suitable combination of two or more of these. The memory medium, where appropriate, may be volatile, non-volatile, or a combination of volatile and non-volatile. Further, the memory medium is not limited to these examples, and any device or medium may be stored as long as the program P can be stored.

The server 10 and/or the terminal 20 can realize the functions of the plurality of functional units shown in the respective embodiments by reading the program P stored in the memory medium and executing the read program P.

Moreover, the program P of the present disclosure can be provided to the server 10 and/or the terminal 20 by any transmission medium (communication network, broadcast wave, etc.) capable of transmitting the program. The server 10 and/or the terminal 20 are not limited. For example, by executing the program P downloaded via the Internet or the like, the functions of the plurality of functional units shown in the respective embodiments are realized.

Further, in each of the embodiments of the present disclosure, the program P may be embodied by electronic transmission and implemented by embedding a carrier wave data signal.
At least a portion of the processing in server 10 and/or terminal 20 can be implemented using cloud computing consisting of more than one computer.

At least a portion of the processing in the terminal 20 may be configured by the server 10. In this case, it is possible to configure the server 10 to perform processing of at least a part of the processing of each functional unit of the control device 21 of the terminal 20.

It may be configured such that at least a part of the processing in the server 10 is performed by the terminal 20. In this case, the processing of at least a part of the processing of each functional unit of the control device 11 of the server 10 may be performed by the terminal 20.

As long as it is not explicitly mentioned, the configuration determined in the embodiment of the present disclosure is not essential, and the designated processing may be performed in a case where the determination condition is satisfied, or may be performed in a case where the determination condition is not satisfied.

In addition, the program of the present disclosure is not limited, and as an example, an object-oriented programming language (object Oriented) such as a script language such as ActionScript or JavaScript (registered trademark), Objective-C, and Java (registered trademark) is used. Programming Language), HTML5 and other markup languages are executed.

<Embodiment>
In the embodiment of the present disclosure, the authentication information of the user of the first account is input to the second terminal operated by the user of the second account selected by the user of the first account, and the second terminal is successfully authenticated and used. The authentication information of the user of the first account is in a form where the first account is logged in at the first terminal of the user of the first account.

<function composition>
(1) Functional Configuration of Terminal As shown in FIG. 1, the terminal 20 uses the storage device 28 to store account information 281 containing information about the user of the terminal 20. In the account information 281, for example, the user data of each terminal included in the account information 151 stored in the server 10 may be related to only the user of the terminal 20.

Further, as shown in FIG. 1, the terminal 20 includes a receiving unit 210, a control unit 211, a transmitting and receiving unit 212, and a display control unit 213 as functions realized by the control device 21.

The receiving unit 210 receives various operations from a user of the terminal 20. The receiving unit 210 receives, for example, an operation of selecting a helper, an operation of recognizing a helper, and the like. The assistant is a user of an account, and the user of the other account of the account can be restored if the account cannot be used to log in.

Further, the recovery of the account means that, on the user side, for example, in the following various situations, the user cannot log in with the account of the user, and the user can log in again. In the following, in the case of a situation in which the user's account cannot be logged in, the present disclosure is not limited to the following cases.
・The user forgets the password of the user's account.
・If the user forgets the password of the user, etc., if it is an email address registered in advance for the account, a system such as a URL (Uniform Resource Locator) or a password for password redistribution is transmitted. In this system, the service provided by the email address is cancelled, or the password of the email address is forgotten, and the user cannot see the email sent to the email address.
・In addition to the use of authentication such as the user ID and the password, the system that uses the two-stage authentication such as the terminal ID is changed by the model of the terminal or the OS of the terminal (the operating system (Operating System)). The case where the terminal ID of the terminal is changed.
In the case where the terminal ID is changed, the authentication number is transmitted by using an SMS message of the mobile phone number or the like, and the system that authenticates using the authentication number cannot accept the SMS due to the cancellation of the mobile phone.
・After a specified time, the user will use the user ID and password for successful authentication in the new terminal within the specified time. The next login is the second stage of using the terminal ID of the new terminal. Certified system. In this system, before the designated receiving operation, the user cannot perform the specified receiving operation in the old terminal due to the old terminal being lost, discarded, or sold.

For example, the control unit 211 performs processing of the assistant selected by the user of the server 10 registered in the terminal 20, and performs various processes for restoring the account using the assistant. Further, for example, the control unit 211 performs various processes for restoring the accounts of other users who use the user of the terminal 20 as a subsidiary.

Further, for example, the control unit 211 performs various processes for providing an instant messaging service using the SNS (Social Networking Service) provided by the server 10.

The transmitting and receiving unit 212 is a group including a plurality of users, and transmits and receives various contents to and from the other terminal 20 via the server 10. Further, the transmitting and receiving unit 212 performs communication for logging in to the server 10.

The display control unit 213 controls the display of the screen of the terminal 20 in accordance with an instruction from the control unit 211 or the display control unit 112 of the server 10.
(2) Functional Configuration of Server As shown in FIG. 1, the server 10 uses the storage device 15 to store account information 151 including information about the users of the terminals 20. The information stored in the account information 151 will be described later.

Further, as shown in FIG. 1, the server 10 includes a control unit 110, a transmitting and receiving unit 111, and a display control unit 112 as functions implemented by the control device 11.

For example, the control unit 110 manages the account information of the plurality of users in the account information 151 of the storage device 15. Further, for example, the control unit 110 responds to the operation of the user of one account and performs registration processing for the user of the assistant of one account. Further, the control unit 110 performs, for example, a process of permitting the user of the one account to be authenticated based on the authentication information of the user of the one account input to the terminal 20 of the assistant of one account.

Further, for example, the control unit 110 performs various processes for providing the service of the instant messaging service or the like in the SNS to the terminal 20 of the user of the account.
The transmitting and receiving unit 111 transmits and receives various materials for recovery of the account and the like to the terminal 20 in accordance with an instruction from the control unit 110. Further, the transmitting and receiving unit 111 transmits a content of a message, a stamp, a moving picture, a voice, or the like from the terminal 20 to a group including a plurality of users by using an instant messaging service or the like.

The display control unit 112 displays various display screens for recovery of the account and the like on the screen of the terminal 20 in accordance with the instruction of the control unit 110.

<Assistant registration processing>
Next, the registration process with respect to the subscriber of the communication system 1 will be described with reference to FIGS. 2, 3A to 3D, and 4A to 4D. Fig. 2 is a sequence diagram showing an example of the registration process of the subscriber of the communication system 1 according to an embodiment of the present disclosure. 3A to 3D are diagrams for explaining a display screen in the terminal 20A of the user A who is required to register with the assistant. 4A to 4D are diagrams for explaining a display screen in the terminal 20B of the user B who is required to register with the assistant.

Further, the user B can be, for example, a spouse, a relative, a friend, a colleague, or the like of the user A. Alternatively, User A and User B may be respective users of a plurality of accounts utilized by the same person. That is, User A and User B can be users each associated with a different account. Therefore, each of the user A and the user B can also be referred to as a user related to the account A (an example of the "first account") and a user related to the account B (an example of the "second account").

Further, regarding the following description of the subsidiary registration process, the user A and the user B log in to the server such as the SNS provided by the server 10 in advance. Further, the terminal 20 makes it possible to use the service by performing the login.

In step S101, the receiving unit 210 of the terminal 20A receives an operation from the user A to start the registration of the assistant. Here, for example, on the display screen 301 of FIG. 3A, the "Auxiliary Registration" button 302 is pressed by the user A. Next, the control unit 211 of the terminal 20A transmits a request for the candidate candidate to the server 10 (step S102).

Next, the control unit 110 of the server 10 determines the candidate of the assistant (step S103). The process of determining the candidate's candidate will be described later. Next, the control unit 110 of the server 10 transmits the information of the candidate's candidate to the terminal 20A (step S104).

Next, the display control unit 213 of the terminal 20A displays the candidate of the assistant on the screen (step S105). For example, the terminal 20A is displayed on the display screen 311 of FIG. 3B, and in the area 312, an image of the user of the candidate of the assistant is displayed, and a list of all the names is displayed. Further, the image 313A and the user's display name 313B are the image of the user B and the display name.

Next, the receiving unit 210 of the terminal 20A receives an operation of selecting a user who is registered from the user A and the candidate as the assistant (step S106). Hereinafter, in the display screen 311 of FIG. 3B, the user B is selected as a helper. Next, the control unit 211 of the terminal 20A transmits the information of the selected user B to the server 10 (step S107).

Next, the control unit 110 of the server 10 generates a token for registering the user B as a user of the user A (step S108), and transmits the generated token to the terminal 20A (step S109). The signature is only valid authentication information within a certain period of time (for example, 1 hour) after the generation, for example, information including the user A and the user B.

Next, the control unit 211 of the terminal 20A notifies the other terminal 20B located within the range specified by the terminal 20A of the information included in the token (step S110). The control unit 211 of the terminal 20A is displayed on the screen 321 of FIG. 3C by displaying the 2-dimensional barcode 322 containing the information of the token on the screen, so as to be located within the specified range from the terminal 20A (the identifiable 2-dimensional barcode 322 is recognized). The terminal 20B within the range that can be photographed under the resolution can be read. Alternatively, the control unit 211 of the terminal 20A can also use the short-range wireless communication such as Bluetooth, NFC (Near Field Communication), wireless LAN, infrared communication, ultrasonic communication, etc., to include the information contained in the token. And transmitted to the terminal 20B located within the range specified by the terminal 20A. Alternatively, the control unit 211 of the terminal 20A may transmit the information included in the token by using communication of a cable such as a USB (Universal Serial Bus) cable. The terminal 20B is located within the range specified by the terminal 20A.

Next, the control unit 110 of the server 10 transmits the helper's approval request to the terminal 20B of the user B (step S111).

Next, the display control unit 213 of the terminal 20B causes the assistant to recognize that the information included in the request is displayed on the screen (step S112). The display control unit 213 of the terminal 20B displays a screen for accepting the recognition operation of the user A as shown in the display screen 401 of FIG. 4A. On the display screen 401 of FIG. 4A, a message 402 from the user A as a requester, an image 403 of the user A, and a message 404 confirming whether or not the user A is a helper are displayed. When the "YES" button 405 is pressed on the display screen 401, the following processing is performed. Also, when the "NO" button 406 is pressed, the registration of the assistant from the user B is rejected.

Next, the control unit 211 of the terminal 20B responds to the recognition operation of the user B, and acquires the token from the terminal 20A (step S113). The control unit 211 of the terminal 20B is displayed on the display screen 411 of FIG. 4B, and may also cause the terminal 20A of the user A to display the message 412 indicating the reading of the second-order barcode, and respond to the photographing operation of the user B, and take a self-contained camera. The 2-dimensional barcode obtains the token. Alternatively, the control unit 211 of the terminal 20B may acquire the token from the terminal 20A by short-range wireless communication or communication of a cable directly connected between the terminals.

Next, the receiving unit 210 of the terminal 20B receives an input operation of the authentication information of the user A (step S114). When the control unit 211 of the terminal 20B acquires the character from the terminal 20A, the display control unit 213 causes the display unit 211 to display a message 422 indicating the input of the authentication information of the user A. As the authentication information of the user A, for example, biometric information (living authentication information) for biometric authentication such as a face image, a fingerprint, or a voice of the user A can be input. Alternatively, as the authentication information of the user A, for example, a password for recovery of the account A of the user A of the user A, or a secret inquiry and an answer may be used. Next, the control unit 211 of the terminal 20B stores the authentication information (live authentication information, password, etc.) of the input user A in the storage device 28 (step S115). Moreover, the control unit 211 of the terminal 20B can also store the authentication information of the user A in the server 10. Then, the control unit 211 of the terminal 20B can transmit the answer to the confirmation of the completion of the assistance to the server 10 (step S116), and the display control unit 213 confirms the completion of the screen display assistant (step S117). The control unit 211 of the terminal 20B displays a message 432 indicating that the user A is registered as a subsidiary, as shown in the display screen 431 of FIG. 4D.

Next, the control unit 110 of the server 10 transmits a helper registration completion notification to the terminal 20A (step S118). The control unit 110 of the server 10 is linked to the account information 151 shown in FIG. 8 which will be described later, and registers the user ID of the user B in the item of the user ID of the user A of the account A of the user A.

Next, the control unit 211 of the terminal 20A uses the display control unit 213 to complete the registration of the screen display assistant (step S119). The control unit 211 of the terminal 20A is configured to display an image 313A of the user B and a message 332 for displaying the message of registering the user B as a subsidiary, as shown in the display screen 331 of FIG. 3D.

≪Helper candidate decision processing≫
Next, the processing of the candidate for the decision assistant in step S103 of Fig. 2 will be described.

Further, the control unit 110 of the server 10 can determine the candidate of the assistant based on the intimacy of the user A and other users. In this case, for example, the higher the intimacy between the plurality of users, the control unit 110 of the server 10 can also calculate the score indicating that the candidate has a higher candidate.

For example, the control unit 110 of the server 10 can determine that the intimacy is higher when the user A is cohabiting with another user, the same situation as the workplace, or the same person. In this case, the control unit 110 of the server 10 can estimate the cohabitation or the like, for example, when the IP address (an example of the "communication address") of the terminal 20 of each user is equal to or greater than the specified threshold. This is because the terminal 20 of each user is presumed to use global IP address communication provided on the wireless LAN router of the home. In addition, for example, when the frequency of the position of the terminal 20 of each user is equal to or greater than the predetermined threshold, the control unit 110 of the server 10 can be estimated to be cohabitation or the like. The "location is the same" of the terminal 20 of each user refers to the difference in the position of the terminal 20 of each user, and is the error of the position information acquired by the GPS (Global Positioning System) of the terminal 20, And the specified threshold below the area of the general residence.

Further, for example, the control unit 110 of the server 10, the larger the number of users (other friends) registered by the user A and other users as friends, can determine the higher the intimacy. Also, for example, the control unit 110 of the server 10, the ratio of the number of the common friends to the total number of users registered as friends of the user A, and the number of the common friends are registered as friends with respect to the other users. The higher the ratio of the number of all users, the higher the intimacy can be determined.

For example, the control unit 110 of the server 10 determines that the longer the period in which the user A and the other user are set as friends, the higher the intimacy. In this case, for example, the control unit 110 of the server 10 may register at least one of the user A and the other user as the length from the date when the other friend is the friend to the current date as the period.

For example, the control unit 110 of the server 10 determines the higher the number of times the frequency is transmitted and received between the user A and the other users, and the higher the frequency. For example, the control unit 110 of the server 10 determines that the frequency of the voice call or the video call between the user A and the other user is higher, and the higher the intimacy is determined.

<Account Recovery Processing>
Next, an example of the account recovery processing of the communication system 1 will be described with reference to Figs. 5A to 8 . 5A and 5B are sequence diagrams showing an example of account recovery processing of the communication system 1 according to an embodiment of the present disclosure. 6A to 6G are diagrams for explaining a display screen in the terminal 20C of the user A who is restored using the requester's account. 7A and 7B are diagrams for explaining a display screen in the terminal 20B of the user B who is restored using the requester's account. Fig. 8 is a view showing an example of account information 151 relating to an embodiment of the present disclosure.

Hereinafter, as an example of account recovery, for the system using the login of the two-stage authentication, the terminal 20A of the old terminal (an example of the "first information processing terminal") used by the user A is connected to the account A of the user A to A case where the terminal 20C of the new terminal (an example of the "second information processing terminal") restores the account A will be described. Further, for example, the user B is authenticated by the server 10 using two-stage authentication such as user authentication using a password and terminal authentication using a terminal ID such as a telephone number of the terminal 20, and has been logged in to the server 10. By.

In step S201, the receiving unit 210 of the terminal 20C accepts the login operation from the user A. For example, in the display screen 601 of FIG. 6A, the user A presses the "login" button 302. Next, the display control unit 213 of the terminal 20C displays the user authentication screen (step S202). Here, for example, the display control unit 213 of the terminal 20C is displayed on the display screen 611 of FIG. 6B, and displays, for example, an input field 612 of the ID of the user and an input field 613 of the password. Further, the ID of the user is used to identify the user's information. For example, when the user A creates the account A in the server 10, it may be an email address registered with the server 10.

Next, the receiving unit 210 of the terminal 20C accepts an input operation of user authentication information such as the ID and password of the user from the user A (step S203). Next, the control unit 110 of the terminal 20C transmits information such as the input user ID and password for user authentication to the server 10 (step S204).

Next, the control unit 110 of the server 10 performs user authentication using the ID and password of the user (step S205), and when the user authentication is successfully performed, transmits a response indicating that the user authentication is successful (step S206). Further, in a case where the account registered by the ID of the user does not exist and the password corresponding to the ID of the user is incorrect, the control unit 110 of the server 10 sends an error back to the terminal 20C without performing the following processing.

Next, the display control unit 213 of the terminal 20C displays the terminal authentication screen (step S207). Here, for example, the display control unit 213 of the terminal 20C displays the input field 622 of the telephone number of the terminal 20C on the display screen 621 of FIG. 6C. Next, the receiving unit 210 of the terminal 20C receives an input operation of the terminal authentication information such as the telephone number of the terminal 20C from the user A (step S208). Next, the control unit 211 of the terminal 20C transmits information for terminal authentication such as a telephone number to the server 10 (step S209). For example, when the control unit 211 of the terminal 20C presses the "send" button 623 on the display screen 621 of FIG. 6C, the telephone number input to the input field 622 is transmitted to the server 10. Next, the display control unit 213 of the terminal 20C displays the input screen of the authentication number (step S210). Here, for example, the display control unit 213 of the terminal 20C displays the input field 632 of the authentication number of the terminal 20C on the display screen 631 of FIG. 6D.

Next, the control unit 110 of the server 10 generates an authentication number that is valid only for a predetermined time (step S211), and transmits an SMS message including the authentication number to the phone via a network of a mobile phone carrier. Number (step S212).

Next, the control unit 211 of the terminal 20C receives the SMS message and causes the SMS message included in the authentication number to be displayed on the screen (step S213). Further, the function of the display is accepted by the SMS message, and can be provided, for example, by the OS of the terminal 20.

Next, the receiving unit 210 of the terminal 20C accepts an input operation of the authentication number from the user A (step S214). Next, the control unit 211 of the terminal 20A transmits the authentication number input from the user A to the server 10 (step S215). For example, when the control unit 211 of the terminal 20C presses the "OK" button 633 on the display screen 631 of FIG. 6D, the authentication number input in the input field 632 is transmitted to the server 10.

Next, the control unit 110 of the server 10 performs terminal authentication for the account A when the received authentication number matches the generated authentication number (step S216). The account information 151 shown in FIG. 8 stores a password, an email address, a telephone number, a terminal ID, a user ID of the assistant, a user ID of the friend, and a service utilization history associated with the user ID.

The user ID is the identification information of the user's account. The password is the password used for authentication at login. The email address is the email address of the user. Alternatively, the email address can be used as the user ID. The telephone number is the mobile telephone number of the terminal 20 of the user. The terminal ID is identification information of the terminal 20 of the user. Further, as the terminal ID, for example, IMSI (International Mobile Subscriber Identity), ICCID (IC Card Identifier), IMEI (International Mobile Equioment Identity) can be used. ), a media access control address (MAC address), or an ID, a mobile phone number, etc. generated by the OS when the terminal is initialized. These terminal IDs can be obtained by an application installed in the terminal 20 and an API (Application Programming Interface) provided by the OS, and are notified from the terminal 20 when logging in to the server 10. Server 10.

The subscriber's user ID is the user ID of one or more users who are registered as a secondary to the user. The friend's user ID is the user ID of more than one user registered as the user's friend. The service use history is, for example, a transmission and reception history of a content such as a message in the SMS, and a call history.

In step S216, the control unit 110 of the server 10 determines that the terminal authentication has succeeded in the case where the terminal ID received from the terminal 20C and the terminal ID of the account A of the user A stored in the account information 151 match. Further, in the case where the terminal authentication is successful, the control unit 110 of the server 10 permits the login of the account A from the terminal 20, and the terminal 20C can use a service such as transmission and reception of the content by the SNS. Hereinafter, the case where the terminal authentication fails will be described.

Next, the control unit 110 of the server 10 transmits a response indicating that the terminal authentication has failed to the terminal 20C in the case where the terminal authentication has failed (step S217).

Next, the display control unit 213 of the terminal 20C displays the selection screen of the restoration method (step S218). Here, for example, the display control unit 213 of the terminal 20C displays the "send authentication number to phone number before change" button 642 and the "letter assistance" button 643 on the display screen 641 of FIG. 6E. Hereinafter, it is assumed that the button 643 is pressed.

Next, when the receiving unit 210 of the terminal 20C accepts the operation of the user A to select the recovery method using the assistant (step S219), the display unit 210 displays one of the one or more users registered as the assistant of the user A (step S220). . For example, the display control unit 213 of the terminal 20C displays a list of images and display names of one or more users registered as a subsidiary in the display screen 651 of FIG. 6F.

Next, the receiving unit 210 of the terminal 20C receives an operation from the user A and selects the user used as the assistant (step S221). Hereinafter, the display screen 651 of FIG. 6F will be described, and the user B is the selected person. Next, the control unit 211 of the terminal 20C transmits the information of the selected user B to the server 10 (step S222).

Next, the control unit 110 of the server 10 generates a token for use by the user B as a user of the user A (step S223), and transmits the generated token to the terminal 20C (step S224). The token is an authentication information that is valid only for a certain period of time (for example, one hour) since the generation, for example, includes information of the user A and the user B.

Next, the control unit 211 of the terminal 20C notifies the other terminal 20B located within the range specified by the terminal 20C of the information included in the token (step S225). The control unit 211 of the terminal 20C displays the same display screen as the display screen 321 of FIG. 3C, and displays the second-order barcode including the information of the token on the screen, and is located within the range specified by the terminal 20C. The terminal 20B can read the token.
Alternatively, the control unit 211 of the terminal 20C can transmit the information contained in the token to the remote location by using short-range wireless communication such as Bluetooth, NFC (Near Field Communication), wireless LAN, infrared communication, or ultrasonic communication. The terminal 20 specifies the terminal 20B within the range. Alternatively, the control unit 211 of the terminal 20C can transmit the information included in the token from the terminal 20C to within a specified range by, for example, communication via a cable such as a USB (Universal Serial Bus) cable. Terminal 20B.

Next, the control unit 110 of the server 10 transmits the helper execution request to the terminal 20B of the user B (step S226).

Next, the display control unit 213 of the terminal 20B causes the information included in the request execution request to be displayed on the screen (step S227). The display control unit 213 of the terminal 20B displays a screen for accepting the recognition operation of the recovery of the account A of the assisting user A, as shown in the display screen 701 of FIG. 7A. The display screen 701 of FIG. 7A displays a message 702 from the user A requesting assistance with account recovery, an image 403 of the user A, and a message 703 confirming whether to assist the user A's account recovery. When the "Yes" button 704 is pressed on the display screen 701, the following processing is performed. Further, when the "NO" button 705 is pressed, execution by the user of the user B is refused.

Next, the control unit 211 of the terminal 20B responds to the recognition operation of the user B, and acquires the token from the terminal 20C (step S228). The control unit 211 of the terminal 20B, as shown in the display screen 411 of FIG. 4B, can display the message 412 indicating the reading of the 2-dimensional barcode from the terminal 20C of the user A, in response to the photographing operation of the user B, and photographed by the camera. The 2-dimensional barcode can be obtained. Alternatively, the control unit 211 of the terminal 20B can acquire the token from the terminal 20C by short-range wireless communication or communication via a cable directly connected between the terminals.

Next, the receiving unit 210 of the terminal 20B accepts an input operation of the authentication information of the user A (step S229). When the control unit 211 of the terminal 20B obtains the token from the terminal 20C, the message 422 prompting the input of the authentication information of the user A is displayed on the display screen 421 of FIG. 4C. As the authentication information of the user A, for example, biometric information for biometric authentication such as a face image, a fingerprint, or a voice of the user A can be input. Alternatively, as the authentication information of the user A, for example, a password for recovery of the account A of the user A of the user A, an inquiry and an answer for inputting a secret, or the like may be used. Next, the control unit 211 of the terminal 20B checks the authentication information of the user A input by the processing of step S218 and the authentication information of the user A stored in the processing of step S115 of FIG. 2, and performs user authentication of the user A (step S230). ).

Next, when the user authentication of the user A is successful, the control unit 211 of the terminal 20B transmits a response to the successful user authentication to the server 10 (step S231), and the screen display assistant authentication is successful (step S232). Moreover, the response of the user authentication success may include the information of the token. The terminal 20B, as shown in the display screen 711 of FIG. 7B, causes the message 432 indicating that the authentication of the user A is restored and the account A of the user A is restored.

Next, the control unit 110 of the server 10 receives the response of the successful user authentication from the terminal 20B and transmits a completion notification of the assistant authentication to the terminal 20C (step S233). The control unit 110 of the server 10 can change the terminal ID of the user A from the terminal ID of the terminal 20A to the terminal ID of the terminal 20C in the account information 151 shown in FIG. According to this, the account A is received from the terminal 20A to the terminal 20C, and it is impossible to log in from the terminal 20A.

Next, the display control unit 213 of the terminal 20C causes the completion of the authentication of the assistant to be displayed on the screen (step S234). The display control unit 213 of the terminal 20C displays a message 662 indicating that the account A has been restored, as shown in the display screen 661 of FIG. 6G.

<Modification 1>
In the above example, as an example of the recovery of the account, for the system for performing login using the two-stage authentication, the terminal 20A of the old terminal used by the user A to the terminal 20C of the new terminal receives the account of the user A using the assistant. The situation of A is explained. In addition to this, in a system that performs authentication using a user ID, a password, or the like, an account recovery process using the above-described subsidiary can be performed. Therefore, for example, in the account A, the account A can be restored even if the email address registered in advance for the password redistribution cannot be utilized.

<Modification 2>
In the above example, as an example of the registration of the helper, an embodiment in which one user becomes a helper will be described. In addition to this, it is also possible to register a plurality of assistants, confirm the authentication of all the assistants, and perform account recovery processing. Furthermore, in addition to this, a plurality of helpers may be registered, and the account recovery process may be performed in the case where it is possible to confirm the authentication of a certain number of helpers or a certain percentage of the helpers.

<Effects of Embodiments>
According to the above embodiment, it is possible to prevent a situation in which the login of the user's account cannot be utilized. Further, according to the above embodiment, it is possible to prevent an increase in the data of the account that the server 10 cannot log in, and as a result, it is possible to reduce the load on the server 10.

While the embodiments of the present disclosure have been described in terms of the drawings and embodiments, it should be noted that various modifications and changes are possible in the present disclosure. Therefore, it should be noted that such variations and modifications are included in the scope of the present disclosure. The example is not limited, and the functions and the like included in each means, each step, and the like may be reconfigured so as not to contradict each other in theory, and a plurality of means or steps may be combined into one or divided. Further, the configurations shown in the respective embodiments may be combined as appropriate. Further, the control unit 110 is an example of a "management unit", a "registration unit", and a "permission unit". Further, the control unit 211 is an example of a "registration unit" and a "permission unit".

1‧‧‧Communication system

10‧‧‧Server

11‧‧‧Control device

110‧‧‧Control Department

111‧‧‧Send and Receive Department

112‧‧‧Display Control Department

12‧‧‧Input and output devices

13‧‧‧ display

14‧‧‧Communication I/F

15‧‧‧Storage device

151‧‧‧Account Information

20‧‧‧ Terminal

20A‧‧‧ Terminal

20B‧‧‧ Terminal

20C‧‧‧ Terminal

21‧‧‧Control device

210‧‧‧ Receiving Department

211‧‧‧Control Department

212‧‧‧Send and Receive Department

213‧‧‧Display Control Department

22‧‧‧Communication I/F

23‧‧‧Input and output devices

24‧‧‧ display device

25‧‧‧ microphone

26‧‧‧Speakers

27‧‧‧ camera

28‧‧‧Storage device

281‧‧‧ Account Information

30‧‧‧Network

301‧‧‧Display screen

302‧‧‧ button

311‧‧‧Display screen

312‧‧‧Area

313A‧‧ images

313B‧‧‧Display user name

321‧‧‧ display screen

322‧‧‧ barcode

331‧‧‧ display screen

332‧‧‧Information on the key to registering User B as a facilitator

401‧‧‧ display screen

402‧‧‧Message from User A's request to become a helper

403‧‧‧User A's image

404‧‧‧Confirm whether to become a user of User A

405‧‧‧"Yes" button

406‧‧‧"No" button

411‧‧‧Display screen

412‧‧‧Information

421‧‧‧ display screen

422‧‧‧Information

431‧‧‧Display screen

432‧‧‧Information

601‧‧‧ display screen

602‧‧‧ Login

611‧‧‧Display screen

612‧‧‧User ID input field

613‧‧‧ password input field

621‧‧‧ display screen

622‧‧‧ Phone number entry field

623‧‧‧"Send" button

631‧‧‧Display screen

632‧‧‧Input number entry field

633‧‧‧"OK" button

641‧‧‧ display screen

642‧‧‧"Send authentication number to phone number before change" button

643‧‧‧ "Let the helper assist" button

651‧‧‧Display screen

652‧‧‧ area

661‧‧‧Display screen

662‧‧‧Information showing the key to the restoration of Account A

701‧‧‧ display screen

702‧‧‧Message from User A requesting assistance with account recovery

703‧‧‧Confirm whether to assist user A's account recovery message

704‧‧‧"Yes" button

705‧‧‧ "No" button

711‧‧‧Display screen

712‧‧‧ shows successful authentication

B‧‧‧ busbar

P‧‧‧ program

S101‧‧‧Participant registration begins operation

S102‧‧‧Determinant's decision requirements

S103‧‧‧Determining the candidate’s alternate

S104‧‧‧Auxiliary candidate information

S105‧‧‧Alternate to display assistants

S106‧‧‧Assistant selection operation

S107‧‧‧User B's information

S108‧‧‧Generation

S109‧‧‧

S110‧‧‧Notice

S111‧‧‧Participants acknowledge the request

S112‧‧‧ shows that the assistant acknowledges the request

S113‧‧‧

S114‧‧‧User A's authentication information input operation

S115‧‧‧Storage User A's Certification Information

S116‧‧‧ Completion of the recognition of the auxiliary

S117‧‧‧ Display assistants acknowledged completion

S118‧‧‧ Completion notice of registration of assistants

S119‧‧‧Display completion notice of registration of sponsors

S201‧‧‧ Login operation

S202‧‧‧Display user authentication screen

S203‧‧‧Input operation for user authentication

S204‧‧‧Information for user authentication

S205‧‧‧User Certification

S206‧‧‧ User authentication success response

S207‧‧‧Display terminal authentication screen

S208‧‧‧Input operation for terminal authentication

S209‧‧‧Information for terminal authentication

S210‧‧‧Display input screen for authentication number

S211‧‧‧Generation number

S212‧‧‧SMS message containing the authentication number

S213‧‧‧ Display SMS messages

Input operation of S214‧‧‧ certification number

S215‧‧‧Certificate number

S216‧‧‧ Terminal Certification

S217‧‧‧ Terminal authentication failure response

S218‧‧‧Display selection screen for recovery method

S219‧‧‧Auxiliary certification selection operation

S220‧‧‧ shows the screen listing all the helpers

S221‧‧‧Assistant selection operation

S222‧‧‧User B's information

S223‧‧‧Generation

S224‧‧‧

S225‧‧‧Notice

S226‧‧‧Assistant implementation requirements

S227‧‧‧Display assistant implementation requirements

S228‧‧‧

S229‧‧‧User A's authentication information input operation

S230‧‧‧User A user authentication

S231‧‧‧User authentication success response

S232‧‧‧ Shows the success of the sponsor certification

S233‧‧‧ End of Certification Notice

S234‧‧‧ shows the end of certification

Fig. 1 is a view showing the configuration of a communication system according to an embodiment of the present disclosure.

Fig. 2 is a sequence diagram showing an example of a registration process of a subscriber of a communication system according to an embodiment of the present disclosure.

FIG. 3A is a diagram for explaining a display screen in the terminal of the user A who is required to register with the assistant.

FIG. 3B is a diagram for explaining a display screen in the terminal of the user A who is required to register with the assistant.

FIG. 3C is a diagram for explaining a display screen in the terminal of the user A who is required to register with the assistant.

FIG. 3D is a diagram for explaining a display screen in the terminal of the user A who is required to register with the assistant.

FIG. 4A is a diagram for explaining a display screen in the terminal of the user B who is required to register with the assistant.

FIG. 4B is a diagram for explaining a display screen in the terminal of the user B who is required to register with the assistant.

FIG. 4C is a diagram for explaining a display screen in the terminal of the user B who is required to register with the assistant.

FIG. 4D is a diagram for explaining a display screen in the terminal of the user B who is required to register with the assistant.

Fig. 5A is a sequence diagram showing an example of an account recovery process of a communication system according to an embodiment of the present disclosure.

Fig. 5B is a sequence diagram showing an example of account recovery processing of the communication system according to an embodiment of the present disclosure.

[Fig. 6A] is a diagram for explaining a display screen in the terminal of the user A who is required to use the recovery of the account of the assistant.

[Fig. 6B] is a diagram for explaining a display screen in the terminal of the user A who is required to use the recovery of the account of the assistant.

[Fig. 6C] is a diagram for explaining a display screen in the terminal of the user A who is required to use the recovery of the account of the assistant.

[Fig. 6D] is a diagram for explaining a display screen in the terminal of the user A who is required to use the recovery of the account of the assistant.

[Fig. 6E] is a diagram for explaining a display screen in the terminal of the user A who is required to use the recovery of the account of the assistant.

FIG. 6F is a diagram for explaining a display screen in the terminal of the user A who is required to use the recovery of the account of the assistant.

[Fig. 6G] is a diagram for explaining a display screen in the terminal of the user A who is required to use the recovery of the account of the assistant.

[Fig. 7A] is a diagram for explaining a display screen in the terminal of the user B who is required to use the recovery of the account of the assistant.

FIG. 7B is a diagram for explaining a display screen in the terminal of the user B who is required to use the recovery of the account of the assistant.

Fig. 8 is a view showing an example of account information relating to an embodiment of the present disclosure.

Claims (15)

An information processing method, which is: The information processing device performs the following processing: Processing for managing the first account and the second account of the service provided by the aforementioned information processing device; When receiving the request from the information processing terminal of the user of the foregoing first account, registering the user of the foregoing second account as a process of recovering the user of the foregoing first account; When the authentication is successful based on the authentication information of the user of the aforementioned first account of the information processing terminal of the user input to the second account, the processing of the login of the user of the first account is permitted. The information processing method of claim 1, wherein the processing of the license is: The information processing terminal of the user of the second account located within the designated range of the information processing terminal of the user of the first account, the authentication is successful based on the authentication information of the user of the first account, and the first account is permitted. User login. The information processing method of claim 2, wherein the processing of the license is: The information processing terminal of the user of the second account permits the login of the user of the first account based on the biometric information of the user of the first account. The information processing method as recited in claim 1 or 2, wherein The processing of the aforementioned license is: Authenticating the user of the first account based on the identification information of the first information processing terminal associated with the foregoing first account, The identification information of the first information processing terminal is different from the identification information of the second information processing terminal of the user of the first account, and is based on the first account of the information processing terminal of the user input to the second account. In the case where the authentication information of the user is successful and the authentication is successful, the second information processing terminal permits the login of the user of the first account. The information processing method of claim 1 or 2, wherein the processing of the registration is: When receiving the request from the information processing terminal of the user of the first account and the request from the information processing terminal of the user of the second account located within the designated range of the information processing terminal of the user of the first account, registering the foregoing The user of the second account acts as a user who can recover the aforementioned first account. The information processing method according to claim 1 or 2, wherein the information processing device performs a process of determining a candidate for recovering the user of the first account in response to the intimacy of the user of the first account and the user of the other account; The processing of the aforementioned registration is: The user of the aforementioned second account selected by the user of the first account from the aforementioned candidate is registered as a user who can restore the first account. The information processing method described in claim 6, wherein the processing of the foregoing decision is: The above candidate is determined based on at least one of the following: a number of users registered as the designated relationship by the user of the first account together with the user of the second account; a period during which the user of the first account and the user of the second account are registered as a designated relationship; the user of the first account The frequency at which the content is transmitted and received with the user of the second account; the communication address of the information processing terminal of the user of the first account is the same as the communication address of the information processing terminal of the user of the second account. And the frequency of the location of the information processing terminal of the user of the first account and the location of the information processing terminal of the user of the second account. An information processing device having the following information processing device, Respectively managing a first account of the services provided by the foregoing information processing device and a management unit of the second account; Receiving the request of the information processing terminal of the user of the first account, registering the user of the second account as the registration part of the user who can recover the first account; The license portion of the user of the first account is permitted to be authenticated based on the authentication information of the user of the first account of the information processing terminal input to the user of the second account. A program that is executed in an information processing device: Respectively managing the processing of the first account and the second account of the services provided by the foregoing information processing device; When receiving the request from the information processing terminal of the user of the foregoing first account, registering the user of the foregoing second account as a process of recovering the user of the foregoing first account; When the authentication is successful based on the authentication information of the user of the aforementioned first account of the information processing terminal of the user input to the second account, the processing of the login of the user of the first account is permitted. A program that is executed in an information processing device: Responding to the operation of the user of the first account in the service provided by the information processing device connected via the network, and authenticating the authentication information of the user of the aforementioned first account based on the information processing terminal of the user input to the second account In the case of success, the user of the aforementioned second account is registered with the aforementioned information processing apparatus as a process for recovering the user of the aforementioned first account. An information processing method, which is performed by an information processing terminal: Responding to the operation of the user of the first account in the service provided by the information processing device connected via the network, and authenticating the authentication information of the user of the aforementioned first account based on the information processing terminal of the user input to the second account In the case of success, the user of the aforementioned second account is registered in the aforementioned information processing apparatus as a process of recovering the user of the aforementioned first account. An information processing terminal having a registration department: Responding to the operation of the user of the first account in the service provided by the information processing device connected via the network, and authenticating the authentication information of the user of the aforementioned first account based on the information processing terminal of the user input to the second account In the case of success, the user of the aforementioned second account is registered as a user who can restore the aforementioned first account to the aforementioned information processing apparatus. A program that is executed by an information processing terminal: Reacting to the operation of the user of the second account in the service provided by the information processing device connected via the network, registering the user of the second account as a process of recovering the user of the first account; The process of permitting the login of the user of the first account by the information processing device based on the authentication success of the user of the first account input to the information processing terminal. An information processing method, which is performed by an information processing terminal: Reacting to the operation of the user of the second account in the service provided by the information processing device connected via the network, and registering the user of the aforementioned second account as the process of recovering the user of the first account; The process of permitting the login of the user of the first account by the information processing device based on the authentication success of the user of the first account input to the information processing terminal. An information processing terminal having an information processing terminal of the following registration department and permission department, Reacting to the operation of the user of the second account in the service provided by the information processing device connected via the network, registering the user of the second account as the registration portion of the user who can recover the first account; The permission of the user of the first account is permitted by the information processing device based on the authentication success of the user of the first account input to the information processing terminal.